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WHAT IS CLAIMED IS: 

1 . A method for generating pseudo-random numbers, comprising the steps of: 
loading a current seed value Sj from a non- volatile storage; 

loading a value, E, representative of environmental randomness; 

loading a value, C, representative of configuration data; 

generating a new seed value, Sj+i, in accordance with the following equation: 
S j+1 =f(S j; A; C; E), 

wherein f represents a selected encryption algorithm , and B is a second constant, 
and wherein Sj is concatenated with A, which is concatenated with C which is 
concatenated with E; 

writing the new seed value Sj+i to the non-volatile storage; 

generating a key, K, in accordance with the following equation: 
K = f(Sj;B;C;E), 

wherein B is a second constant; and 

generating a pseudo-random number output, P m in accordance with the following 
equation: 

Pn = f3DEs(K, P n -l), 

where f 3D Es represents the operation of triple DES encryption hardware, and P n _i 
is the previously generated pseudo-random number. 

2. The method of claim 1, wherein the function f comprises the FIPS 180 secure 
hash standard algorithm (SHA). 

3. The method of claim 1 , wherein the value E includes at least 80 bits of entropy. 

-8- 



Attorney Docket No. 56162.000420 

GV 220 



4. The method of claim 1, wherein the seed Sj is 160 bits in length. 

5. The method of claim 1, wherein the seed Sj is 256 bits in length. 

6. The method of claim 1, wherein the seed Sj is 512 bits in length. 

I. The method of claim 1, wherein an initial value of Po is 0. 

8. The method of claim 1, further comprising the steps of loading values for the first 
and second constants A and B from a protected ROM address. 

9. The method of claim 8, wherein the first and second constants A and B further 
incorporate a copyright notice embedded therein. 

10. The method of claim 1, wherein the f3DES hardware is operated in output feedback 
mode. 

II. The method of claim 1, wherein the f3DES hardware is operated in dual counter 
mode. 

12. A computer-readable medium incorporating one or more instructions for 
generating pseudo-random numbers, the instructions comprising: 

one or more instructions for loading a current seed value Sj from a non- volatile 
storage; 

one or more instructions for loading a value, E, representative of environmental 
randomness; 

one or more instructions for loading a value, C, representative of configuration 

data; 

one or more instructions for generating a new seed value, Sj+i, in accordance with 
the following equation: 
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S j+ i=f(Sj;A;C; E), 

wherein f represents a selected encryption algorithm , and B is a second constant, 
and wherein Sj is concatenated with A, which is concatenated with C which is 
concatenated with E; 

one or more instructions for writing the new seed value Sj+i to the non-volatile 
storage; 

one or more instructions for generating a key, K, in accordance with the following 
equation: 

K = f(S j; B;C;E), 
wherein B is a second constant; and 

one or more instructions for generating a pseudo-random number output, P n , in 
accordance with the following equation: 

Pn = f3DEs(K, P n -l), 

wherein f3DEs represents the operation of triple DES encryption hardware, and P n -i 
is the previously generated pseudo-random number. 

13. The computer-readable medium of claim 12, wherein the function f comprises the 
FIPS 180 secure hash standard algorithm (SHA). 

14. The computer-readable medium of claim 12, wherein the value E includes at least 
80 bits of entropy. 

15. The computer-readable medium of claim 12, wherein the seed Sj is 160 bits in 
length. 
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16. The computer-readable medium of claim 12, wherein the seed Sj is 256 bits in 
length. 

17. The computer-readable medium of claim 12, wherein the seed Sj is 512 bits in 
length. 

18. The computer-readable medium of claim 12, wherein an initial value of Po is 0. 

19. The computer-readable medium of claim 12, further comprising one or more 
instructions for loading values for the first and second constants A and B from a 
protected ROM address. 

20. The computer-readable medium of claim 19, wherein the first and second 
constants A and B further incorporate a copyright notice embedded therein. 

21 . The computer-readable medium of claim 12, wherein the f 3DE s hardware is 
operated in output feedback mode. 

22. The computer-readable medium of claim 12, wherein the f 3D ES hardware is 
operated in dual counter mode. 



